use html_safe instead of raw

ping #73